Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: MgBjSU0OfP2RrsoxZfXm+B/TXY6TKtPb08HkpaeWHhQ=
Subject key identifier: 98:FF:74:F2:F9:51:CC:3B:CA:97:EA:1A:87:56:63:51:37:1A:26:24
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019D265F7BEFA93B48494C1778F85577A452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 6B
Signing time: Wed 25 Mar 2026 19:01:24 +0000
Manifest this update: Wed 25 Mar 2026 19:01:24 +0000
Manifest next update: Thu 26 Mar 2026 19:01:24 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: pNMZpUEA1JclhAEByfSxpPFmcLg6+fKBsQg0zwDpwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7b:ef:a9:3b:48:49:4c:17:78:f8:55:77:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Mar 25 19:01:24 2026 GMT
Not After : Mar 26 19:01:24 2026 GMT
Subject: CN=98ff74f2f951cc3bca97ea1a87566351371a2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:d2:8e:b1:80:71:f5:be:92:ca:75:50:14:
19:6d:7e:a8:fb:f1:aa:e4:0d:75:46:19:c8:12:67:
02:af:f2:8b:d8:20:fc:a0:31:06:de:f8:1a:93:c2:
aa:ed:ec:6d:ea:0f:93:0a:17:63:14:9d:44:8d:2e:
96:b9:3a:27:13:0c:7b:6d:ea:2c:1f:36:0d:7a:82:
ee:9a:66:0c:bd:91:b5:78:73:96:bd:af:32:00:1d:
44:87:fb:2b:5c:ef:c1:20:02:96:96:76:9e:21:f1:
f4:06:a5:6f:90:b9:d7:d1:63:b5:fa:91:4e:f8:e0:
8e:84:c8:0a:a0:16:4f:4c:15:2c:05:bc:7a:04:e3:
47:40:2a:75:aa:8b:89:10:78:6f:23:03:13:56:ed:
9b:df:bb:34:3c:45:7e:e1:a4:06:91:bc:ec:ee:b6:
e4:71:cd:f5:ca:7f:5d:bc:22:60:bc:66:26:86:43:
10:c5:16:3e:6a:09:af:81:64:f4:75:e6:2f:c7:da:
9a:99:aa:f5:07:ba:9c:03:e7:38:01:ef:ce:71:69:
4d:98:31:35:ba:b2:93:85:45:06:0f:f3:c6:ca:ec:
ed:c8:24:28:1d:11:11:ae:d6:c9:82:bf:f5:38:d9:
52:b4:f8:40:d7:d8:13:72:fb:9c:0d:89:9e:a7:0f:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:74:F2:F9:51:CC:3B:CA:97:EA:1A:87:56:63:51:37:1A:26:24
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1c:63:80:70:c0:96:e8:17:1b:f6:3a:8d:3b:96:9e:27:3f:
54:81:bf:c8:1b:4d:d8:59:57:6d:e4:74:20:58:2a:6c:94:df:
76:93:94:ed:fe:56:e8:f8:8f:b6:1d:f6:da:f5:11:db:64:39:
be:26:b2:dc:d2:14:7c:ca:35:53:17:ac:ee:f8:cd:b4:ec:4b:
b4:22:63:7f:74:0d:2a:79:25:6f:5d:b6:ea:50:d3:93:17:34:
ad:66:8b:55:61:9d:ad:95:34:17:3a:c8:77:cf:ca:86:65:91:
de:1d:76:b8:0d:a8:78:ee:db:86:f3:ce:1b:a6:ff:3c:3f:b7:
52:42:49:a5:62:3d:3e:8a:6b:7f:e8:c0:73:99:0e:fb:54:87:
4a:7d:ba:47:bd:83:96:54:bd:ae:c7:23:79:11:84:a4:70:4e:
68:58:51:f1:fa:66:f3:ac:68:dd:db:98:1a:cf:d1:1b:50:d7:
ef:8d:8e:8b:74:b0:bc:5b:d7:d9:e8:fe:7d:15:36:3a:f7:01:
ba:66:2c:14:07:aa:cd:28:ba:a2:5d:60:0d:01:e3:5e:20:27:
3f:c5:cf:89:56:93:d3:bd:43:eb:93:bf:64:4e:9a:89:30:93:
e7:52:50:de:07:57:e0:ee:f8:8f:d6:37:31:14:16:b0:df:2e:
b0:79:21:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3vvqTtISUwXePhVd6RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTM3ZTk5NjZkNGJhZmY3YzM5MjAzOGQ0MzMxN2QyYWY5
MTRiYTcwHhcNMjYwMzI1MTkwMTI0WhcNMjYwMzI2MTkwMTI0WjAzMTEwLwYDVQQD
Eyg5OGZmNzRmMmY5NTFjYzNiY2E5N2VhMWE4NzU2NjM1MTM3MWEyNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfbSjrGAcfW+ksp1UBQZbX6o+/Gq
5A11RhnIEmcCr/KL2CD8oDEG3vgak8Kq7ext6g+TChdjFJ1EjS6WuTonEwx7beos
HzYNeoLummYMvZG1eHOWva8yAB1Eh/srXO/BIAKWlnaeIfH0BqVvkLnX0WO1+pFO
+OCOhMgKoBZPTBUsBbx6BONHQCp1qouJEHhvIwMTVu2b37s0PEV+4aQGkbzs7rbk
cc31yn9dvCJgvGYmhkMQxRY+agmvgWT0deYvx9qamar1B7qcA+c4Ae/OcWlNmDE1
urKThUUGD/PGyuztyCQoHRERrtbJgr/1ONlStPhA19gTcvucDYmepw8FcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj/dPL5Ucw7ypfqGodWY1E3GiYkMB8GA1UdIwQY
MBaAFJUTfplm1Lr/fDkgONQzF9KvkUunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMt
OWM2NjdmMzBmZjhkLzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOThiMGEtZTFkMS00MWRkLTk4ZDMtOWM2NjdmMzBmZjhk
LzEvbFJOLW1XYlV1djk4T1NBNDFETVgwcS1SUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBxjgHDA
lugXG/Y6jTuWnic/VIG/yBtN2FlXbeR0IFgqbJTfdpOU7f5W6PiPth322vUR22Q5
viay3NIUfMo1Uxes7vjNtOxLtCJjf3QNKnklb1226lDTkxc0rWaLVWGdrZU0FzrI
d8/KhmWR3h12uA2oeO7bhvPOG6b/PD+3UkJJpWI9Poprf+jAc5kO+1SHSn26R72D
llS9rscjeRGEpHBOaFhR8fpm86xo3duYGs/RG1DX742Oi3SwvFvX2ej+fRU2OvcB
umYsFAeqzSi6ol1gDQHjXiAnP8XPiVaT071D65O/ZE6aiTCT51JQ3gdX4O74j9Y3
MRQWsN8usHkh/g==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:14 2026 by rpki-client